Extracted

• • Target
    Contrato_Indeniza_Brasil-L071QZ.lnk
  • Size 1KB
  • SHA256 256b583638eef167aed5c83150ed5f798877c43d96b8fbf0c53d05f770cc1de0
  • MD5 d14a8efb1fc0d21121eba22bbc3b91da
  • SHA1 43df1b676e78586cbe4bdf99b7597e915e906c87
  • SHA512 aa1a8ad5d9dbb860227e32f87169ad9e9be995752c1062d9d09a016cbd634dbada0da50c55c54bf6925d7d8d9fc655b2772b23ee200c81cd6a07ee8a29495ad1
  • TLSH
    T1D83197503EFD0614F2B3CE7685BB7B1199BBF9A68E20CA4E40804A4C1062A00E57BF67
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2